Privacy Policy

1. Who is responsible for your data

The controller for the processing described in this policy is:

If you have questions about how we handle your personal data, you are always welcome to contact us by email.

2. What data we collect

To use Citizen Sverige you need an account. You can register with an email address and password, or sign in with Google or Apple. The table below shows what data we process, why, and on what legal basis under the General Data Protection Regulation (GDPR).

The website citizensverige.com does not use any tracking cookies or other non-essential cookies.

3. How the data is used

We use your data to:

• create and manage your account and sign you in securely,
• save your practice progress, saved words and test results across devices,
• show the app in the language you have chosen,
• unlock Premium after a purchase via the App Store or Google Play,
• improve the app through aggregated product analytics,
• detect and correct technical errors.

We never sell your personal data, we show no advertising and we do not use your data for profiling for marketing purposes.

4. Third parties and data processors

We use a small number of carefully selected service providers to run the app. They process data only on our behalf and according to our instructions. Your account data is stored with Supabase in the EU (Stockholm, the eu-north-1 region).

Where data is processed outside the EU/EEA, a level of protection equivalent to that within the EU is ensured, for example through the European Commission’s standard contractual clauses or equivalent approved safeguards.

5. Google and Apple sign-in

If you choose to sign in with Google or Apple, we receive the following data from your sign-in provider:

• your name,
• your email address,
• your profile picture, where applicable.

We never see your Google or Apple password – the sign-in takes place entirely at Google and Apple respectively. The data is used only to create and identify your account in Citizen Sverige and is not passed on for other purposes.

6. Purchases

Premium in Citizen Sverige is a one-time purchase – no subscription, nothing renews automatically. The price and validity period are the same on iPhone and Android and are stated in the terms §3. The purchase is handled entirely by Apple App Store and Google Play respectively, which means that:

• we never receive or store your card details or other payment information,
• the payment takes place directly between you and Apple or Google,
• we only see a receipt and your premium status, so that we can unlock Premium on your account.

Apple’s and Google’s terms respectively apply to refunds and receipt handling.

7. Newsletter and subscription

If you sign up for our newsletter on the web, we process your email address in order to send you news about the citizenship test and updates about the app. We also save which language you chose and the time of your sign-up – no other personal data.

• Purpose: to send you the newsletter you asked for.
• Legal basis: your consent (GDPR art. 6.1 a). We use double opt-in – your sign-up takes effect only once you have confirmed it via a link in an email.
• Retention: until you unsubscribe. Every mailing contains an unsubscribe link, and unconfirmed sign-ups are cleared automatically.
• Recipients: the emails are sent via our email provider Resend (data processor). The newsletter is separate from any app account you may have.

You can withdraw your consent at any time via the unsubscribe link in an email or by contacting us at hej@citizensverige.com.

7a. The contact form and support email

If you send a message via the contact form at citizensverige.com/kontakt – or email us directly – we process the name, the email address and the message that you write yourself, plus the time. We never ask for more than that, and you do not need an account to write to us.

• Purpose: to read your enquiry and reply to you.
• Legal basis: legitimate interest (GDPR art. 6.1 f) – being able to give support to anyone who gets in touch. If the enquiry concerns a purchase or your account, the basis is instead the performance of our contract with you (art. 6.1 b).
• Recipients: the message is delivered as an email to the support inbox at Swiftcore AB, which operates Citizen Sverige and is the controller under point 1. The sending itself is done via our email provider Resend (data processor). The message is not stored in our database, is never published and is used neither for marketing nor for product analytics.
• Retention: the enquiry is kept in the support inbox for as long as it is needed to handle it and to understand a recurring problem, but no longer than 24 months, after which it is deleted. If the enquiry concerns a purchase or a guarantee payment, the data may need to be kept longer under the Swedish Accounting Act.
• Spam protection: so that the form cannot be misused for mass mailings, we keep a temporary, one-way encrypted (hashed) counter for your IP address and email address. It contains neither the address nor the IP number in readable form, cannot be used to identify you and is cleared automatically.

If you want us to delete an earlier conversation, email hej@citizensverige.com and we will do so.

8. Retention and deletion

We keep your data for as long as you have an account with us. When you delete your account, the account and all associated data are permanently removed from our database at Supabase – no freezing or archiving – within 30 days.

You can delete your account in three ways:

• in the app via Settings → Account → Delete account,
• on the web at citizensverige.com/kontoradering,
• by email to hej@citizensverige.com.

Note that receipts and purchase history at Apple and Google are governed by their own terms and cannot be deleted by us.

9. Your rights under the GDPR

You have the right to:

• obtain access to the personal data we process about you (a data extract),
• have incorrect data corrected,
• have your data erased (”the right to be forgotten”),
• request restriction of the processing,
• receive your data in a structured, machine-readable format (data portability),
• object to processing based on legitimate interest,
• withdraw a consent at any time, if processing is based on consent.

If you want to exercise any of your rights, contact us at hej@citizensverige.com and we will help you without undue delay.

If you believe that we process your data incorrectly, you always have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (IMY), imy.se.

10. Security

We protect your data with technical and organisational measures. All traffic between the app and our servers is encrypted, passwords are never stored in plain text but are hashed and handled by Supabase Auth, and access to the database is strictly limited. Data is stored in the EU (Stockholm).

11. Children

Citizen Sverige is aimed at adults preparing for the Swedish citizenship test. The app is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe that a child has created an account, contact us at hej@citizensverige.com and we will delete the account.

12. Changes to this policy

We may update this privacy policy, for example when the app gets new features or when legislation changes. The latest version is always available on this page, and the date at the top shows when the policy was last updated. For significant changes we will inform you in the app.